Network Access Control

I am about to upgrade our CiscoSecure  ACS from 4.1 to 4.2.  If I do so on a live network, can that affect anything within my network?I would hate to bring down an entire network and upset about 3000 users.Thanks in advance!

I am doing an eval of 5.2, we currently have 4.2 running in our network.I followed the user guide to set up a shell profile for priviledged exec mode.  Set both the default and miximum priviledge to static 15.  When I login to a network device, get t...

Here is my config:aaa new-modelaaa group server radius RADIUS_AUTH server xx.xx.3.11 auth-port 1645 acct-port 1646!aaa authentication login networkaccess group RADIUS_AUTH localaaa authorization exec default group RADIUS_AUTH if-authenticatedaaa acco...

Hello everyone,I am having a problem getting an ASA running 8.3 to authenticate an SSL VPN directly against an LDAP on Windows Server 2003.  I have changed the read access on the Active Directory to allow Annonymous to read it.  I think I am missing ...

HiAs far as I know there are some methods to pack radius VSA attributes. Here are:As the part of Cisco-AVPair26 - VSALength9  - Vendor ID1  - Vendor Type (Cisco-AVPair Attribute ID)Attribute Name=ValueIn the Vendor Specific attribute ("throught attri...

I'd like to know if there is a way to exclude passed authentications for a specific username from reporting in the Authentications-TACACS and Authentications-RADIUS reports?We have a few usernames that are used in scheduled jobs.  We only need to kno...

Tyring to use the "File Operations" option to import hosts into ACS.  I go through the wizard and click "Finish", the pop up goes blank and just hangs there.  No errors are genereated.  Anyone ever come accros this?

Has anyone successfully integrated the Cisco ACS 1121 with 5.1 and AD and been able to use multiple policies to permit or deny access to different NDG?  I am able to authenticate agains AD but I am having an issue with getting the policies to use the...

Hi, I am trying to authenticate Remote VPN users via LDAP and integrate this with "Dial-in" Permission attribute of user account. It works fine for a single domain with the following conifguration.aaa-server ldap-server (Inside) host 10.10.10.1 ldap-...

I have an ACS Solutions Engine that is performing TACACS authentication for remote access to Switches and now want to add 802.1X support for port based access control against the ACS server also.  For some reason this is not working for me at all.  D...

Hi, we are trying to renew an ACS 4.2 certificate issued by Windows 2003 CA, but now we have a Windows 2008 CA on R2 Standard Edition.Do you know any issue about it ?It seems ACS cannot see the new certificated issed by windows 2008 CA.thank you in a...